NEWS
PARASITES
SOFTWARE
FORUM
DIRECTORY

 
 
 
 
 
 
  

Results of analyzing your log
The HijackThis log analyzer beta 2 is a brand new service, so it is natural that it may have a few issues with entry descriptions and status. You can help us to improve the analyzer! If you have some information on unknown items, please share it with us and thousands of 2-Spyware.com visitors. We will carefully check your submission and approve it, if it is correct. You can also change status of entries that do not look identified correctly to you. Also feel free to post your description for existing items. We will review and add it to the analyzer's database. Thank you!

Files and registry entries considered to be safe
Legitimate items6351%
Not necessary items119%
 7460%

File and registry entries that can be both dangerous or safe
Questionable items1714%
Unknown items3226%
 4940%

Files and registry entries considered to be DANGEROUS. Fix immediately!
Dangerous items00%


Line: Status: Comments: Actions:
C:\WINDOWS\Explorer.EXE
More info about file explorer.exe		 Legitimate Process found in system process library Change status
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
More info about file point32.exe		 Legitimate Item found in 2-spyware.com library
Microsoft IntelliPoint Mouse Software.		 Change status
C:\WINDOWS\System32\igfxtray.exe
More info about file igfxtray.exe		 Legitimate Item found in 2-spyware.com library
From a user: I just(hours ago) installed some newer Intel graphics drivers in my system(82810E),...		 Change status
C:\WINDOWS\System32\hkcmd.exe
More info about file hkcmd.exe		 Legitimate Item found in 2-spyware.com library
hkcmd.exe is a system process related to the Hotkey Command Module for Intel Graphics Contollers....		 Change status
C:\WINDOWS\System32\igfxpers.exe
More info about file igfxpers.exe		 Legitimate Item found in 2-spyware.com library
Related to the integrated intel graphics adapter driver.		 Change status
C:\WINDOWS\system32\tp4serv.exe Unknown No exact entries found Insert file into database
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
More info about file ezejmnap.exe		 Legitimate Item found in 2-spyware.com library
EzEjMnAp.Exe is a process related to IBM ThinkPad EasyEject utility.		 Change status
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe Unknown No exact entries found Insert file into database
C:\WINDOWS\System32\igfxsrvc.exe
More info about file igfxsrvc.exe		 Legitimate Item found in 2-spyware.com library
igfxsrvc.exe is a legitimate system process that is part of the Intel Common User Interface. 		Change status
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
More info about file tponscr.exe		 Legitimate Item found in 2-spyware.com library
The file belongs to IBM ThinkPad application which is used to configure and use the hotkeys.		 Change status
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
More info about file issch.exe		 Legitimate Item found in 2-spyware.com library
Executable issch.exe is a standard component of InstallShield software. It is used to connect to...		 Change status
C:\Program Files\Lenovo\Zoom\TpScrex.exe
More info about file tpscrex.exe		 Legitimate Item found in 2-spyware.com library
The file is related to ThinkPad UltraZoom application.		 Change status
C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe Unknown No exact entries found Insert file into database
C:\WINDOWS\system32\rundll32.exe
More info about file rundll32.exe		 Legitimate Process found in system process library Change status
C:\WINDOWS\System32\dpmw32.exe
More info about file dpmw32.exe		 Legitimate Item found in 2-spyware.com library
Executable dpmw32.exe provides support for Novell Distributed Print Services, used in Novell...		 Change status
C:\WINDOWS\system32\NWTRAY.EXE Unknown No exact entries found Insert file into database
C:\Program Files\Analog Devices\Core\smax4pnp.exe
More info about file smax4pnp.exe		 Legitimate Item found in 2-spyware.com library
The file is related to SoundMax software.		 Change status
C:\windows\System32\DLA\DLACTRLW.EXE
More info about file dlactrlw.exe		 Legitimate Item found in 2-spyware.com library
The file is a part of Sonic Drive Letter Access (DLA) application.		 Change status
C:\WINDOWS\system32\TpShocks.exe
More info about file tpshocks.exe		 Legitimate Item found in 2-spyware.com library
IBM Hard Drive Active Protection. In case of rapid movements the hard drive is put on a protection...		 Change status
C:\OfficeScan NT\pccntmon.exe
More info about file pccntmon.exe		 Legitimate Item found in 2-spyware.com library
Related to anti-virus products from Trend Micro.		 Change status
C:\Program Files\Adobe\Distillr\Acrotray.exe
More info about file acrotray.exe		 Legitimate Item found in 2-spyware.com library
Related to Adobe Acrobat Reader program.		 Change status
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe Unknown No exact entries found Insert file into database
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe Unknown No exact entries found Insert file into database
C:\WINDOWS\system32\rundll32.exe
More info about file rundll32.exe		 Legitimate Process found in system process library Change status
C:\Program Files\Messenger\msmsgs.exe
More info about file msmsgs.exe		 Legitimate Item found in 2-spyware.com library
Windows Messenger from Microsoft. Located in "C:\Program Files\Messenger\". If you don't use...		 Change status
C:\WINDOWS\system32\ctfmon.exe
More info about file ctfmon.exe		 Legitimate Process found in system process library Change status
C:\Lotus\Notes\framework\shared\eclipse\plugins\com.ibm.productivity
.tools.base.app.win32_3.0.1.20080130-2245\soffice.exe
More info about file soffice.exe		 Legitimate Item found in 2-spyware.com library
Vital component of the OpenOffice.org suite		 Change status
C:\Documents and Settings\0n7063\Application Data\Google\Google Talk\googletalk.exe
More info about file googletalk.exe		 Legitimate Item found in 2-spyware.com library
Main component of Google Talk		 Change status
C:\Program Files\Adobe\Acrobat\acrobat_sl.exe
More info about file acrobat_sl.exe		 Legitimate Item found in 2-spyware.com library
The file is related to Adobe Acrobat application.		 Change status
C:\Program Files\Novell\ZENworks\NalWin.exe Unknown No exact entries found Insert file into database
C:\Program Files\Novell\ZENworks\NalAgent.exe Unknown No exact entries found Insert file into database
C:\Program Files\Mozilla Firefox\firefox.exe
More info about file firefox.exe		 Legitimate Item found in 2-spyware.com library
File firefox.exe launches Mozilla Firefox web browser, implements user interface and controls all...		 Change status
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
More info about file hijackthis.exe		 Legitimate Item found in 2-spyware.com library
This is the main component of HijackThis security application, designed to perform system scans and...		 Change status
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://slweb.sargentlundy.com/ Not necessary http://slweb.sargentlundy.com/ is your start page.
If you do not like this fact, fix this item.		 Change status
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\ActiveX\AcroIEHelper.dll
More info about file acroiehelper.dll		 Legitimate Application program item according to inner database
File related to Adobe Acrobat Reader program.		 Change status
O2 - BHO: (no name) - {2445f331-0e44-4154-bc66-87efc18bd240} - C:\WINDOWS\system32\repeseza.dll (file missing) Not necessary Fix this item, because it points to file that cannot be found Change status
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
More info about file ssv.dll		 Legitimate System item according to inner database
Related to Java Virtual Machine software, which is legitimate.		 Change status
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll
More info about file acroiefavclient.dll		 Legitimate System item according to inner database
The file belongs to Adobe Acrobat to display .pdf files in Internet Explorer.		 Change status
O4 - HKLM\..\Run: [POINTER] point32.exe
More info about file point32.exe		 Legitimate System item according to inner database
Microsoft IntelliPoint Mouse Software.		 Change status
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
More info about file igfxtray.exe		 Legitimate System item according to inner database
From a user: I just(hours ago) installed some newer Intel graphics drivers in my system(82810E),...		 Change status
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
More info about file hkcmd.exe		 Legitimate System item according to inner database
hkcmd.exe is a system process related to the Hotkey Command Module for Intel Graphics Contollers....		 Change status
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\System32\igfxpers.exe
More info about file igfxpers.exe		 Legitimate Application program item according to inner database
Related to the integrated intel graphics adapter driver.		 Change status
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
More info about file ezejmnap.exe		 Legitimate Application program item according to inner database
EzEjMnAp.Exe is a process related to IBM ThinkPad EasyEject utility.		 Change status
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup Legitimate InstallShield Automatic Updater Change status
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
More info about file issch.exe		 Legitimate Application program item according to inner database
Executable issch.exe is a standard component of InstallShield software. It is used to connect to...		 Change status
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [NDPS] C:\WINDOWS\System32\dpmw32.exe
More info about file dpmw32.exe		 Legitimate Application program item according to inner database
Executable dpmw32.exe provides support for Novell Distributed Print Services, used in Novell...		 Change status
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE Questionable questionable item according to our database Change status
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
More info about file smax4pnp.exe		 Legitimate Application program item according to inner database
The file is related to SoundMax software.		 Change status
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
More info about file smax4.exe		 Legitimate Application program item according to inner database
The file belongs to SoundMAX Control Center.		 Change status
O4 - HKLM\..\Run: [DLA] C:\windows\System32\DLA\DLACTRLW.EXE
More info about file dlactrlw.exe		 Legitimate Application program item according to inner database
The file is a part of Sonic Drive Letter Access (DLA) application.		 Change status
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
More info about file tpshocks.exe		 Legitimate System item according to inner database
IBM Hard Drive Active Protection. In case of rapid movements the hard drive is put on a protection...		 Change status
O4 - HKLM\..\Run: [ZENRC Tray Icon] C:\WINDOWS\System32\zentray.exe Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\OfficeScan NT\pccntmon.exe" -HideWindow
More info about file pccntmon.exe		 Legitimate Application program item according to inner database
Related to anti-virus products from Trend Micro.		 Change status
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Distillr\Acrotray.exe"
More info about file acrotray.exe		 Legitimate Application program item according to inner database
Related to Adobe Acrobat Reader program.		 Change status
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k Questionable questionable item according to our database Change status
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
More info about file qttask.exe		 Legitimate Application program item according to inner database
Provides system tray access to Apple's Quicktime Player. Located in "C:\Program Files\QuickTime\"....		 Change status
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe Unknown No exact entries found Insert file into database
O4 - HKLM\..\Run: [d48371ef] rundll32.exe "C:\WINDOWS\system32\yasijote.dll",b Unknown No exact entries found Insert file into database
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
More info about file msmsgs.exe		 Legitimate System item according to inner database
Windows Messenger from Microsoft. Located in "C:\Program Files\Messenger\". If you don't use...		 Change status
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
More info about file ctfmon.exe		 Legitimate Application program item according to inner database
When you run a Microsoft Office XP or Microsoft Office 2003 program, the file Ctfmon.exe (Ctfmon)...		 Change status
O4 - HKCU\..\Run: [SODCPreLoad] C:\Lotus\Notes\framework\shared\eclipse\plugins\com.ibm.productivity
.tools.base.app.win32_3.0.1.20080130-2245\preload.exe C:\Lotus\Notes\Data\workspace\.sodc\		 Unknown No exact entries found Insert file into database
O4 - HKCU\..\Run: [googletalk] C:\Documents and Settings\0n7063\Application Data\Google\Google Talk\googletalk.exe /autostart
More info about file googletalk.exe		 Legitimate Application program item according to inner database
Main component of Google Talk		 Change status
O4 - HKCU\..\Run: [juhafuhone] Rundll32.exe "C:\WINDOWS\system32\dakagego.dll",s Unknown No exact entries found Insert file into database
O4 - HKCU\..\Run: [MS Juan] rundll32 "C:\DOCUME~1\0n7063\LOCALS~1\Temp\bkppbu.dll",run Unknown No exact entries found Insert file into database
O4 - HKCU\..\Run: [CPMd7b04273] Rundll32.exe "C:\WINDOWS\system32\kiwasuge.dll",a Unknown No exact entries found Insert file into database
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ? Not necessary Fix this item because it points to nowhere Change status
O4 - Global Startup: Application Window.lnk = ? Not necessary Fix this item because it points to nowhere Change status
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe Unknown No exact entries found Insert file into database
O4 - Global Startup: office.exe Questionable Global Startup - link: 'office.exe', file: '' Change status
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll Not necessary This item represents extra button in your IE toolbar without name and points to file 'C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL Not necessary This item represents extra button in your IE toolbar with a name 'Research' and points to file 'C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Novell delivered applications - {C1994287-422F-47aa-8E5E-6323E210A125} - C:\Program Files\Novell\ZENworks\AxNalServer.dll Not necessary This item represents extra button in your IE toolbar with a name 'Novell delivered applications' and points to file 'C:\Program Files\Novell\ZENworks\AxNalServer.dll'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm Not necessary This item represents extra button in your IE toolbar with a name '@btrez.dll,-4015' and points to file 'C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm'. If you do not want it to be there, fix this item. Change status
O9 - Extra ''Tools'' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm Not necessary This item represents extra menu item in your Tools menu in IE with a name '@btrez.dll,-12650' and points to file 'C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe Not necessary This item represents extra button in your IE toolbar without name and points to file 'C:\WINDOWS\Network Diagnostic\xpnetdiag.exe'. If you do not want it to be there, fix this item. Change status
O9 - Extra ''Tools'' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe Not necessary This item represents extra menu item in your Tools menu in IE with a name '@xpsp3res.dll,-20001' and points to file 'C:\WINDOWS\Network Diagnostic\xpnetdiag.exe'. If you do not want it to be there, fix this item. Change status
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Legitimate Legitimate extra button in your browser - related to windows messenger. Change status
O9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Legitimate Legitimate extra tools menu item - related to Windows Messenger. Change status
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll Questionable This item represents actions of so-called Layered Service Provider. It can be legitimate item or spyware. Be careful fixing it, because you can lose your internet connection. Find more information in Google or use a program called LSPFix. Change status
O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupINICtrl Class) - http://av1/officescan/console/clientinstall/setupini.cab Questionable Are you using an ActiveX object with a name 'OfficeScan Corp Edition Web-Deployment SetupINICtrl Class' located in 'http://av1/officescan/console/clientinstall/setupini.cab'? If not, fix this item. Change status
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - http://av1/officescan/console/clientinstall/setup.cab Questionable Are you using an ActiveX object with a name 'OfficeScan Corp Edition Web-Deployment SetupCtrl Class' located in 'http://av1/officescan/console/clientinstall/setup.cab'? If not, fix this item. Change status
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab Questionable Are you using an ActiveX object with a name 'Facebook Photo Uploader 5 Control' located in 'http://upload.facebook.com/controls/2008.10
.10_v5.5.8/FacebookPhotoUploader5.cab'? If not, fix this item.		 Change status
O16 - DPF: {2DAD3559-2923-4935-AD49-B673D2539944} (IASRunner Class) - https://www-307.ibm.com/pc/support/access/aslibmain/content/AcpIR.cab Questionable Are you using an ActiveX object with a name 'IASRunner Class' located in 'https://www-307.ibm.com/pc/support/access/aslibmain/content/AcpIR.cab'? If not, fix this item. Change status
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - Questionable Are you using an ActiveX object with a name 'Java Runtime Environment 1.6.0' located in ''? If not, fix this item. Change status
O16 - DPF: {983A9C21-8207-4B58-BBB8-0EBC3D7C5505} (Domino Web Access 8 Control) - http://mail02b.sargentlundy.com/dwa8W.cab Questionable Are you using an ActiveX object with a name 'Domino Web Access 8 Control' located in 'http://mail02b.sargentlundy.com/dwa8W.cab'? If not, fix this item. Change status
O16 - DPF: {9b935470-ad4a-11d5-b63e-00c04faedb18} (Oracle JInitiator 1.1.8.16) - http://iasprod.sargentlundy.com/jinitiator/jinit.exe Questionable Are you using an ActiveX object with a name 'Oracle JInitiator 1.1.8.16' located in 'http://iasprod.sargentlundy.com/jinitiator/jinit.exe'? If not, fix this item. Change status
O16 - DPF: {CAFECAFE-0013-0001-0013-ABCDEFABCDEF} (JInitiator 1.3.1.13) - http://gpprod.sargentlundy.com/forms90/jinitiator/jinit.exe Questionable Are you using an ActiveX object with a name 'JInitiator 1.3.1.13' located in 'http://gpprod.sargentlundy.com/forms90/jinitiator/jinit.exe'? If not, fix this item. Change status
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0) - Questionable Are you using an ActiveX object with a name 'Java Runtime Environment 1.6.0' located in ''? If not, fix this item. Change status
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0) - Questionable Are you using an ActiveX object with a name 'Java Runtime Environment 1.6.0' located in ''? If not, fix this item. Change status
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = sargentlundy.com Questionable Do you recognize these IP addresses 'sargentlundy.com' as your internet provider DNS servers? If not, fix this item. Change status
O17 - HKLM\Software\..\Telephony: DomainName = sargentlundy.com Questionable Do you recognize these IP addresses 'sargentlundy.com' as your internet provider DNS servers? If not, fix this item. Change status
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = sargentlundy.com Questionable Do you recognize these IP addresses 'sargentlundy.com' as your internet provider DNS servers? If not, fix this item. Change status
O23 - Service: Atheros Configuration Service (acs) - Atheros - C:\WINDOWS\System32\acs.exe
More info about file acs.exe		 Legitimate Item found in 2-spyware.com database.
The file is related to Atheros Wireless LAN...		 Change status
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
More info about file adskscsrv.exe		 Legitimate Item found in 2-spyware.com database.
This is a legitimate file related to Autodesk licensing...		 Change status
O23 - Service: Autodesk Network Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskNetSrv.exe Unknown No exact entries found Insert file into database
O23 - Service: Client Update Service for Novell (cusrvc) - Novell, Inc. - C:\WINDOWS\System32\cusrvc.exe Legitimate Related to Novel server. Change status
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
More info about file cvpnd.exe		 Legitimate Item found in 2-spyware.com database.
cvpnd.exe is a background task used by several applications and published by Cisco Systems. The...		 Change status
O23 - Service: FlipShare Service - Unknown owner - C:\Program Files\Pure Digital Technologies\FlipShare\FlipShareService.exe Unknown No exact entries found Insert file into database
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\System32\ibmpmsvc.exe
More info about file ibmpmsvc.exe		 Legitimate Item found in 2-spyware.com database.
ibmpmsvc.exe belongs to IBM Power Management...		 Change status
O23 - Service: Intuit Update Service (IntuitUpdateService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe Unknown No exact entries found Insert file into database
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
More info about file aawservice.exe		 Legitimate Item found in 2-spyware.com database.
...		 Change status
O23 - Service: Novell Application Launcher (NALNTSERVICE) - Novell, Inc. - C:\Program Files\Novell\ZENworks\nalntsrv.exe Legitimate Novell NAL NT service Change status
O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\System32\ngvpnmgr.exe Unknown No exact entries found Insert file into database
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\OfficeScan NT\ntrtscan.exe
More info about file ntrtscan.exe		 Legitimate Item found in 2-spyware.com database.
ntrtscan.exe is a part of the Trend Micro Antivirus...		 Change status
O23 - Service: OfficeScanNT Personal Firewall (OfcPfwSvc) - Trend Micro Inc. - C:\OfficeScan NT\OfcPfwSvc.exe Legitimate Related to Trend Micro, Inc. - http://www.trendmicro.com/ Change status
O23 - Service: OracleOracle816ClientCache80 - Unknown owner - C:\Oracle\816\BIN\ONRSD80.EXE Unknown No exact entries found Insert file into database
O23 - Service: OracleOracle817ClientCache - Unknown owner - C:\Oracle\817\BIN\ONRSD.EXE Unknown No exact entries found Insert file into database
O23 - Service: Novell ZENworks Remote Management Agent (Remote Management Agent) - Novell, Inc. - C:\Program Files\Novell\ZENworks\RemoteManagement\RMAgent\ZenRem32.exe Unknown No exact entries found Insert file into database
O23 - Service: System Update (SUService) - Lenovo Group Limited - C:\Program Files\Lenovo\System Update\SUService.exe
More info about file suservice.exe		 Legitimate Item found in 2-spyware.com database.
suservice.exe is part of the McAfee Streaming Update Service from...		 Change status
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe Unknown No exact entries found Insert file into database
O23 - Service: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\OfficeScan NT\tmlisten.exe
More info about file tmlisten.exe		 Legitimate Item found in 2-spyware.com database.
This is an essential part of OfficeScan antivirus software, which is based on server and client...		 Change status
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe Unknown No exact entries found Insert file into database
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
More info about file tpkmpsvc.exe		 Legitimate Item found in 2-spyware.com database.
The file belongs to IBM Thinkpad...		 Change status
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
More info about file tvtsched.exe		 Legitimate Item found in 2-spyware.com database.
tvtsched.exe is a legitimate application process related to IBM ThinkVantage Scheduler. It should...		 Change status
O23 - Service: Novell XTier Agent Services (XTAgent) - Novell, Inc. - C:\WINDOWS\System32\Novell\XTAgent.exe Legitimate Change status
O23 - Service: Workstation Manager (ZFDWM) - Novell, Inc. - C:\Program Files\Novell\ZENworks\wm.exe Legitimate Novell Workstation Manager Change status


Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

Recommended software:
Malwarebytes Anti Malware
(91/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t have many features. One such...
SpyHunter
(89/100)
SpyHunter is a quite simple, but yet highly effective spyware remover with an easy-to-use interface. This program is an excellent choice for users, who are not computer savvy, but...
Spyware Doctor
(87/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and easy-to-manage...
STOPzilla
(86/100)
STOPzilla is a powerful anti-spyware program that detects, blocks, and removes malicious software allowing users to surf the Web not worrying about spyware, Trojan horses, and viruses....
XoftSpySE Anti Spyware
(84/100)
XoftSpySE, an anti-spyware program made by ParetoLogic, Inc., is a simple, but effective on-demand scanner with the typical set of functions but very easy to install and use. Trial version...

Latest Spyware news:
• Carl A Someone signature loved by spammers
• State of Utah Reveals Why 780k People Records Were Stolen
• The iPhone And iPad Are Targets For Hackers
• Malicious tweets spread rogue AV infecting Android users
• Be aware about malware spread via hotel Wi-Fi connections
• SecureCloud Key Management Systems Released by Trend Micro
• Microsoft and Adobe Releases Critical Security Updates. Update Now!
• Internet Apocalypsis Upcoming - Prepare for DNSChanger Servers Closure
• Hacks Through Compromised Websites Increases Rapidly, Says Symantec
• Facebook judged for its privacy controls

Subscribe to news

Encyclopedia of parasites:
ErrorSmart 24/05/12
Windows Safety Maint... 24/05/12
Windows Multi Contro... 23/05/12
System Protection Tools 23/05/12
Redirect 22/05/12
Windows Secure Kit 2012 22/05/12
WeatherBug 21/05/12
Dugenpal 21/05/12
Komodola 21/05/12
SpyGraphica 20/05/12
Windows Private Shield 20/05/12
WinMaximizer 19/05/12
Windows Pro Safety R... 18/05/12
Stekct 18/05/12
Linfo 18/05/12
Wiarp 18/05/12
Farfli 18/05/12
Happili redirect 18/05/12
Vasport 17/05/12
SeekService.com 17/05/12

Library of files:
mrt.exe 23/05/12
taskeng.exe 23/05/12
mplayer.exe 14/04/12
ccApp.exe 20/03/12
guest.js 06/03/12
BCU.exe 20/02/12
pbupdate.exe 20/02/12
dumprep.exe 20/02/12
arp.exe 12/02/12
hero remote control.... 08/02/12

Archive of files
Archive of startup entries
Latest Spyware Threats: Smart Data Recovery | Smart Fortress 2012 | Antivirus Protection 2012 | Internet Security | Internet Security 2012 | System Check | Smart HDD | Security Shield
Agreement of Use | Privacy policy | Webmasters | Contact us | RSS Feeds | Follow us | Like us
© 2001-2011 2-spyware.com All Rights Reserved. Reproduction in part or whole without written permission is prohibited. Powered by: eSolutions.